Security Scan Report: cookwithlina.com

Site favicon
Submitted: Sep 23, 2026, 1:17:44 PMCompleted: Sep 23, 2026, 1:18:50 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Legitimate-looking recipe blog that has been compromised: it serves injected gambling SEO spam, loads a multi-feed flagged malicious host, and triggers a CRITICAL AMOS ClickFix malware-loader IDS alert. Avoid.

Risk Factors
CRITICAL IDS malware alert (AMOS ClickFix / AMOS Loader)
Third-party malicious host IoC (rehearsal-b.com, multi-feed corroborated)
Repeated requests to a suspicious .life TLD domain flagged as bad traffic
Compromised site serving injected gambling/casino SEO spam across many languages
Domain age information unavailable

Details

Page Title

Cook With Lina - Recipes Made with Love & Simplicity.

Scan Type

public

Domain Name Analysis

The domain name 'cookwithlina.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Count 12 characters in 'cookwithlina' holding 5 vowels versus seven consonants. Segmentation suggests three words: cook, with, lina. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cookwithlina.com

Page Load Overview

7.49s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:11,028 chars
Detector Agreement:100%

Website Classification

Primary Category

news/blog70% confidence
Type: spa
Method: structural

All Detected Categories

news/blog
70%
corporate
70%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10172.67.145.161Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.250.154.95Google · CDNUnited States
AS15169Google LLC
3138.124.60.214Switzerland
AS203273NetCrafters OU
3172.66.168.194Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
318.66.107.160Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3104.21.79.123Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.20.95Google · CDNUnited States
AS15169Google LLC
318.66.107.57Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3142.251.20.94Google · CDNUnited States
AS15169Google LLC
3142.251.13.154Google · CDNUnited States
AS15169Google LLC
7322--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T128C123F303481C336FB1528974477218E01564EBE5DCDED9F6CB6A9E2AD4EBD9232212

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:HoY6Wj5Nwi3jq2MejxTKODvCTvvC0UyyxHPHcvBpZpjxozY721:16Wd3meFTKOGeFyyxHPkZplos721

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5942:AFSBEBgKkIAAQmQyAQpMAAABeAAQYJAggKAK8IQUBCAbyLsNGZSCA0yOEgAAEYRAwARBBJqhAAKoRDEwESABA4BIJAJUmAAB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000000ffffff
Perceptual Hash:c03fd03f5a855a2d
Difference Hash:391527071188aaa0
Wavelet Hash:0101010101ffffff
Color Hash:#86562d

Scan History

Scan history not available

Unable to load historical scan data